Bopizy Platform Privacy Policy

ARTICLE 1: PREAMBLE

The purpose of this privacy policy is to inform users of the Bopizy platform:
- On the way in which their personal data is collected. Personal data is considered to be any information that allows a user to be identified. As such, this may include: their first and last names, age, postal or email address, location or IP address (non-exhaustive list);
- On the rights they have regarding this data;
- On the person responsible for processing the personal data collected and processed;
- On the recipients of this personal data;
- On the site's policy on cookies.

This policy supplements the legal notices and the General Conditions of Use available to users at the following address: https://www.bopizy.com/pages/conditions-generales-d-utilisation-et-de-service-de-bopizy

This privacy policy supplements the privacy policy of our commercial site Bopizy.com available at the following address: https://www.bopizy.com/policies/privacy-policy

ARTICLE 2: PRINCIPLES RELATING TO THE COLLECTION AND PROCESSING OF PERSONAL DATA

In accordance with Article 5 of European Regulation 2016/679, personal data are:
- Processed in a lawful, fair and transparent manner with regard to the data subject;
- Collected for specific purposes (see Article 3.1 hereof), explicit and legitimate, and not further processed in a manner incompatible with these purposes;
- Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
- Accurate and, where necessary, kept up to date. All reasonable steps must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay;
- Kept in a form which permits identification of the persons concerned for a period not exceeding that necessary for the purposes for which they are processed;
- Processed in a manner that ensures appropriate security of the collected data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures.

Processing shall be lawful only if and to the extent that at least one of the following applies:
- The data subject has consented to the processing of his or her personal data for one or more specific purposes;
- Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the data subject's request prior to entering into a contract;
- The processing is necessary for compliance with a legal obligation to which the controller is subject;
- The processing is necessary to protect the vital interests of the data subject or of another natural person;
- The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
- Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.


ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED DURING BROWSING ON THE SITE

Article 3.1: Data collected
The personal data collected as part of our activity are as follows:
- Identifiers, including name, email address, postal address and telephone number;
- The categories of personal information listed in the customer records status, including name, mailing address, billing address, telephone number, and credit or debit card information;
- Commercial information, including products you purchase, add to your shopping cart, favorites or review (if you are a customer), and information you provide to us about yourself or your business (if you are a merchant);
- Photos and videos, which may include facial images, if you provide them;
- Internet and other electronic network activity information, including information about the device and browser you are using, your network connection, your IP address and navigational information as you navigate our applications and sites;
- Geolocation data, including your postal address and billing address;
- Inferences, or information derived from other personal information about you, including your preferences, interests and other information used for the purpose of personalizing your experience;
- Other information you provide; and sensitive personal information, including: Government identifiers, including social security number, driver's license number, national identity card number or passport number;
- Your account access credentials (such as login ID, financial account ID, or credit or debit card number associated with a required secure access code or credentials to access an account);

The collection and processing of this data meets the following purpose(s):
- prevent risks and fraud;
- answer questions or provide other types of assistance;
- help merchants find and use services;
- provide and improve products and services;
- provide reports and analyses;
- test additional features or services;
- send communications to merchants relating to Bopizy services;
- provide assistance with marketing, advertising or other communications.

Article 3.2: Method of data collection
When you use our site, we collect and use personal information provided by:

YOU : We collect information you provide when you use our platform, including when you register on Bopizy as a merchant, visit a Bopizy-powered store, fill out information about your order, visit a Bopizy website, or contact Bopizy Support. We collect the account and payment information you provide to us (including information about your business if you are a merchant), that you provide to Bopizy stores, the purchases you make, the reviews you post, and how you interact or communicate with stores or other users through our applications and services. We also collect browsing information as you navigate our applications and sites, including search terms you enter.

Your device(s): We collect information about and from your devices, including computers, phones, and other internet-connected devices that you use to access our apps and services. We combine this information across the different devices you use.

Third parties: We receive information from partners who help us provide our services to you, including:

From Service Providers: We receive information from our service providers who help us provide services to our merchants, such as screening accounts for fraud or other concerns.

Further Processors: We work with third-party further processors for cloud hosting, content delivery, data analysis, technical support and customer relationship management, internal logging, order fulfillment service, and email delivery, among other things, to provide our Services to you.

Data analytics and cookie providers: We receive information through our use of cookies, social plugins, pixels and tags for business purposes, such as providing information to measure how users interact with content on our website. To learn more about how we use these technologies, please see our Cookie Policy.

Because we need your personal information to provide Bopizy's services, we generally retain your personal information, including sensitive information, for as long as you use Bopizy's products or services or until you ask us to delete your information. We may also retain your personal information to comply with legal obligations or protect our interests or those of others.

If you are acting as a merchant in a Bopizy-powered store and you close your store, stop paying your subscription fees, or we terminate your account, we will retain your store data for two years before beginning the deletion process.

When you visit or make a purchase from a store powered by Bopizy, please be aware that we act as a service provider or data processor on behalf of merchants and that it is the merchant who decides how long your information is retained, not Bopizy.

The company may retain certain personal data beyond the periods announced above in order to fulfill its legal or regulatory obligations.

Article 3.3: Data hosting
Google Cloud Platform
Google France, 8 rue de Londres, 75 009 Paris – France.

Article 3.4: “Cookies” policy
Some cookies are necessary to enable you to move around our website, use its features and access its secure areas. The use of these cookies is essential to the operation of the website. For example, we use user input cookies for the duration of a session to track a user's input as they fill out forms across multiple pages.

We also use functional cookies to remember choices you make or information you provide, such as your username, language, or the region you are in. This allows us to customize your experience on our website according to your preferences. For example, authentication cookies are functional cookies that are used for a session (or persistent, if you agree to use the “Remember Me” feature) to allow users to log in on subsequent visits or access authorized content across multiple pages. Some of the functional cookies we use include:
- User-centric security cookies are used to detect authentication abuse for a limited continuous period of time, such as failed login attempts. These cookies are specifically set to improve the security of the service.
- Multimedia content playback cookies (flash cookies) are used for the duration of a session to record technical data necessary for the playback of video or audio content (for example: image quality, network connection speed, and buffer memory parameters).
- Persistent user interface customization cookies are used to store a user's preference for a service across multiple web pages.

Improving the user experience is a fundamental aspect for Bopizy and we use many tools to improve our website and our commerce platform. To this end, we use reporting and data analysis cookies to collect information about how you use our website or our merchants' online stores, as well as your frequency of use. Here are some of the performance cookies we use:
- First-party analytics cookies: We use these cookies to estimate the number of unique visitors, to improve our websites and those of our merchants. These cookies are not used to target you with online marketing. We use these cookies to learn more about the performance of our websites and those of our merchants, as well as to make relevant improvements to your browsing experience.
- Third-party analytics cookies: We also use Google Analytics and other third-party analytics providers to help us measure how users interact with our website content. These cookies “remember” what our users do on previous pages and how they interact with the website. To learn more about Google Analytics, visit Google’s information page.
- Advertising cookies are used on our website to personalize marketing content based on you and your interests and to subsequently offer you a more personalized service. These cookies remember your visit to our website. Although these cookies can track visits from your device to our website and other sites, they generally cannot identify you personally. Without these cookies, the advertising you see would be less relevant and interesting to you.

ARTICLE 4: DATA CONTROLLER AND DATA PROTECTION OFFICER

Article 4.1: The data controller
Personal data is collected by Bopizy, SAS with capital of €237,000, whose registration number is 978 531 903 RCS Lillemetropole.

The person responsible for processing personal data can be contacted as follows:
By mail to the address: Bopizy, 87 Rue du Fontenoy, 59100 Roubaix;
By email: support@bopizy.com.

Article 4.2: The data protection officer
The data protection officer of the company or the controller is:
Loic Gueguen
Address: Bopizy, 87 Rue du Fontenoy, 59100 Roubaix
Email: support@bopizy.com

If, after contacting us, you believe that your “Data Protection and Freedom of Information” rights have not been respected, you can send information to the CNIL.

ARTICLE 5: USER RIGHTS REGARDING DATA COLLECTION AND PROCESSING

Any user concerned by the processing of their personal data may exercise the following rights, in application of European regulation 2016/679 and the Data Protection Act (Law 78-17 of 6 January 1978):
- Right of access, rectification and right to erasure of data (set out respectively in articles 15, 16 and 17 of the GDPR);
- Right to data portability (Article 20 of the GDPR);
- Right to limitation (Article 18 of the GDPR) and to opposition to data processing (Article 21 of the GDPR);
- Right not to be subject to a decision based exclusively on an automated process;
- Right to determine the fate of data after death;
- Right to refer the matter to the competent supervisory authority (Article 77 of the GDPR).

To exercise your rights, please send your letter to Bopizy, 87 Rue du Fontenoy, 59100 Roubaix or by email to support@bopizy.com

In order for the data controller to comply with his/her request, the user may be required to provide certain information such as: his/her first and last names, his/her email address and his/her account number, personal space number or subscriber number.

Visit cnil.fr for more information on your rights.

ARTICLE 6: CONDITIONS FOR MODIFICATION OF THE PRIVACY POLICY

The publisher of the Bopizy.com site reserves the right to modify this Policy at any time in order to ensure that users of the site comply with current law.

Any changes will not affect purchases previously made on the site, which remain subject to the Policy in effect at the time of purchase and as accepted by the user when validating the purchase.

The user is invited to read this Policy each time he uses our services, without it being necessary to formally notify him.

This policy, edited on 01/02/2025, was updated on 03/02/2025.